Privacy Policy

Who we are

Sidequest (“Sidequest,” “we,” “us”) operates this application. The formal legal entity name, registered address, and jurisdiction of incorporation for this notice are [to be added by counsel/the operator — not yet established in this draft].

Information we collect

We collect the information you give us directly in order to generate and track your plan:

• Your account email address, used for authentication and account communications.
• Your income-assessment answers — the skills, interests, available time, income goal, preferred business model, and optional starting idea you enter on the assessment.
• Proof-of-work text and any external proof link you submit when completing a quest.
• The product ideas, quests, coaching feedback, and generated assets (outreach messages, landing-page copy, interview guides, and similar) Sidequest creates for your account.
• Revenue entries you choose to log against your focused product.
• Billing metadata connected to your Stripe customer and subscription/payment records (Sidequest does not store your card number — see “Subprocessors” below).

How we use AI

Sidequest sends your assessment answers to OpenAI to generate your product ideas and quest plans, sends your submitted proof text to OpenAI to generate coaching feedback on quest completion, and sends your focused product and quest context to OpenAI when you request an on-demand tool (an interview guide, outreach message, or landing-page draft) or a “loot” asset. OpenAI processes this text to generate a response; Sidequest does not use your data to train its own models. All AI-generated content is labeled as such in the product and is not reviewed by a person before you see it — see our Terms of Service for what that means for reliance on generated content.

Subprocessors

Sidequest uses the following third parties to operate the product:

• OpenAI — generates product ideas, quests, coaching feedback, and assets from the inputs described above.
• Stripe — processes payments and manages billing for the Launch Pass and Builder plans. Sidequest never sees or stores your full card number.
• Supabase — provides the database, authentication, and storage infrastructure behind Sidequest.

Cookies and tracking

Sidequest does not use tracking cookies, advertising pixels, or third-party analytics scripts today. Your signed-in session is stored in your browser’s local storage, not a cookie, purely so the application can recognize you as logged in; a short-lived local-storage entry is also used to carry your assessment answers across signup if you complete the assessment before creating an account. Neither is used for tracking or advertising. If that changes, this policy will be updated before any such feature launches.

Data Retention, Export, and Deletion

Export: you can download a complete copy of everything Sidequest holds about you — your profile, assessments, product ideas, quests, proof reviews, generated assets, revenue entries, and badges — at any time from your account, whether or not a deletion is in progress.

Deletion: account deletion is currently initiated by a Sidequest administrator on your behalf (for example, in response to a request you send us — [self-service contact channel to be added]). Once requested, your account enters a 30-day grace period. During that window you will see a persistent in-app notice and can cancel the deletion yourself at any time with one click; signing in does not cancel it automatically. If the grace period elapses without cancellation, Sidequest permanently deletes your account and every row you own, and cancels any active Builder subscription. Sidequest’s own internal administrative and audit-log records that reference your account (for example, a record that an administrator took a support action) are retained after deletion for accountability purposes; these records already exclude your assessment answers, proof text, generated content, and revenue figures, and the reference to your account is nulled out once your account no longer exists.

Admin access to your data

Sidequest administrators can see a limited operational view of your account when providing support — your account status, billing state, and which stage of the product journey you are in — but this view is deliberately built to exclude your assessment answers, the full text of your submitted proof, the body or prompts of generated assets, and your revenue amounts or notes. Administrators cannot see your password, and never see your authentication tokens.

International data transfers

Not applicable today. Sidequest has not confirmed that it operates in or serves users in the European Union, the United Kingdom, or any jurisdiction that would require a specific cross-border transfer mechanism (such as Standard Contractual Clauses). This section is included so that a future editor knows it was considered, not overlooked — it should be revisited if Sidequest confirms EU/UK users.

Children’s privacy

Sidequest requires account holders to be at least 18 years old (see the minimum-age requirement in our Terms of Service). Sidequest does not knowingly collect personal information from anyone under that age.

Changes to this policy

We may update this policy as Sidequest changes. Material changes will update the “Last updated” date above.

Contact us

Questions about this policy or your data can be sent to [support/privacy contact address to be added].